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Abstract 

We obtain asymptotic formulae for the number of primes p ^ x 
for which the reduction modulo p of the elliptic curve 

E„,f, : Y^ = X^ + aX + b 

satisfies certain "natural" properties, on average over integers a and b 
such that \a\ ^ A and |6| ^ B, where A and B are small relative to x. 
More precisely, we investigate behavior with respect to the Sato-Tate 
conjecture, cyclicity, and divisibility of the number of points by a fixed 
integer m. 
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1 Introduction 



1.1 Motivation 

For integers a and b such that 4a^ + 276^ 7^ 0, we denote by the elhptic 
curve defined by the affine Weierstrafi equation: 

Ea,b ■■ = X^ + aX + b. 

For a basic background on elhptic curves, we refer the reader to the book [H] 
by Silverman. 

For any prime p > 3, we denote by ¥p the finite field with p elements, 
which we identify with the set of integers {0, ±1, . . . , ±{p — l)/2}. 

When p f 4a^ + 276^, the set Ea^b(Fp) consisting of the Fp-rational points 
of Eq b together with a point at infinity forms an abelian group under an 
appropriate composition rule called addition, and the number of elements in 
the group E^ f,(Fp) satisfies the Hasse bound: 

|#E,,fe(Fp)-p-l| ^2Vp 

(see, for example, [lU Chapter V, Theorem 1.1]). 

A well known conjecture in the theory of elliptic curves, known as the 
Lang-Trotter conjecture (see [35]), asserts that for any elliptic curve E^ b and 
any fixed integer t, the number 7ia^b{t', x) of primes p ^ x (with p \ 4a^ + 276^) 
such that 

#E,,6(Fp) = p + l-t 
satisfies the asymptotic formula 



' X 

7ra,b(i; X) ~ Ca,b,t " 7^ {x ^ Oo) 

logo; 

with some constant Ca,b,t that depends only on a, b, and t, provided that Ea^h 
does not have complex multiplication (see [131 Section III. 4]) or t is nonzero. 
The Lang-Trotter conjecture remains open, although some progress has been 
made (see the survey [30]). 

Fouvry and Murty [23] have studied the problem of estimating Tra,b{0;x) 
on average over integers a,b with \a\ ^ A and ^ 5 and have shown 
(see [2?I Theorem 6]) that the asymptotic formula 



1 \ ^ \ ^ TT -v/a; 

na,b{0] X) - ■ [X oo] 



AAB ^ ^ ' ' ' ' 3 logx 
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holds uniformly in the range 



AB ^ and min{A, B} ^ (1) 

where e > is fixed. For the case t 7^ 0, David and Pappalardi [T^j have 
established the following asymptotic formula in a shorter range of A and B: 



where 



^ ^ ' ' ' \ogx 



2 T-r / 1 \ ^ TT ^'(^'^ ~ P 



O'-m^-i, n 



Pit ^ ^ ^ Pit ^ 

This work has been extended by Baier [3] to the full range ([1]). Other results 
along these lines have been obtained in[Illll[ni[2Dl[2SlE21ES|. 

We remark that another type of problem "on average" over a similar 
family of curves has been considered in [2n [27] . 

Here, we investigate the average behavior of the family of curves f, with 
\a\ ^ A and |6| ^ i? with respect to some natural statistical properties of 
their reductions modulo p. Although these properties are expected to hold 
for individual curves, such results remain inaccessible. 

1.2 Our Results 

In the present paper, we study how the family of curves ^ with |a| ^ A 
and |6| ^ -B behaves with respect to: 

• the Sato-Tate conjecture about the distribution of the cardinalities 
#E,,fe(Fp) (see |34j); 

• cyclicity of the group Ea {,(Fp), a notion which essentially dates back 
to the work of Borosh, Moreno and Porta [TT| and of Serre 



• divisibility of #Ea_b(IFp) by a given integer m. 

Accordingly, for real ^ a < /3 ^ vr, we define the Sato-Tate density 



2 

/isT(a,/3) = - / sin^6' 

Jo. 



d9. 



3 



and we define the angle ipa,bij>) ^ [0, tt] via the identity 

p+l- #E,,fe(Fp) = 2^ cos iJaM- 

We denote by n^^^(a, /?; x) the number of primes p ^ x (with p \ 4a^ + 276^) 
for which a ^ ipa,b{,p) ^ P- The Sato-Tate conjecture asserts that if 'Ea^b does 
not have complex multiplication, then the asymptotic formula 

n^^a, (3; x) ~ /isT(«, P) ■ 7^ {x oo) (2) 

holds (see [TOl [Ml SI]). 

It is well known that Ea^ft(Fp) is an abelian group of rank at most two. 
We denote by 11^ j,(x) the number of primes p ^ x (with p \ 4a^ + 276^) for 
which Ea^fe(Fp) is cyclic. The conjectured asymptotic formula 

X 

KA^) ~ '^'^.fe ■ ] (x oo), 

logx 

where Ca^b is a constant that depends only on a and b, has been established 
conditionally (under the Extended Riemann Hypothesis) in some cases, and 
there are several unconditional lower bounds on n^j,(x); see the original 
papers [l3l[Tll[I7lll8l[28l[39lll3]as well as the recent' surveys ^ HO]. 

Finally, for a fixed integer m ^ 1, we denote by 11° ^(m; x) the number of 
primes p ^ x (with p \ 4a^ + 276^) for which m \ ^Ea^bi^p)- 

It worth mentioning that the Chebotarev density theorem can be used to 
study n°^(m;x) for individual curves (see tl5]|). By averaging over a and b, 
however, we obtain sharper results which are also uniform in m up to any 
fixed power of log x. 

Taylor [?5] has recently announced a complete proof of the Sato-Tate 
conjecture, which implies (|2]) in particular, but his work on individual curves 
does not imply any results on average due to the lack of uniformity with 
respect to the coefficients a and b in the Weierstrafi equation. 

Here, we obtain an asymptotic formula for the number of pairs (a, b) 
with \a\ ^ A, \b\ ^ B and p f 4a^ + 276^ such that Ea,b(^p) belongs to 
a certain sufficiently "massive" collection of isomorphism classes of elliptic 
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curves. Using this result, we derive asymptotic formulae for the sums 

\a\<iA\b\<:B 
\a\<iA\b\<:B 

E E ^aAm;^)- 

\a\<:A\b\<iB 

The main terms in our expansions of N^^i^{A, B; x), N'^{A, B; x) and 
N^{A, B] x) are derived from asymptotic formulae of Birch [10], Vladu^ [16] 
and Howe [29], respectively. The asymptotic formula of Birch [10] is not 
quite sufficient for our purposes, however, so we give an explicit bound for 
the error term which is obtained using the method of Niederreiter [12] . 

In the case of the Sato-Tate distribution, the computation of the error 
term is almost trivial. The other cases require a more specialized treatment, 
and these are done using now standard techniques; for example, we apply a 
result of Indlekofer, Wehmeier and Lucht [30] . 

In the last section, we give an outline of several other questions concerning 
reductions of elliptic curves that can be approached with our method. 

1.3 Our Method 

The functions N^^f^^A, B; x), N^{A,B]x) and N^{A,B;x) can be studied 
via the method of Fouvry and Murty [23], which makes essential use of the 
Weil bound] see [33, Chapter 5]. Here, however, we obtain sharper results 
by applying bounds on multiplicative character sums rather than estimat- 
ing exponential sums as in [23j. Using the Poly a- Vinogradov and Burgess 
bounds (see [3T| Theorems 12.5 and 12.6]) one already obtains stronger re- 
sults for individual primes than with exponential sums. Moreover, the use of 
multiplicative character sums allows for additional savings on average over 
primes p ^ x. In the present paper, we use a result of Garaev [23] on mul- 
tiplicative character sums, which is derived from a variant of the large sieve 
inequality (see [311 Section 7.4]), and we obtain nontrivial bounds in a region 
that is significantly wider than ([1]). Our method leads to bounds which are 
nontrivial whenever A and B satisfy the inequalities 

A, 5 ^ x= and AB ^ (3) 



N^'^{A,B;x)- 
N''{A,B;x) = 
Nl{A,B-x) = 
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However, to avoid some tedious technical complications and more cluttered 
expressions for the error term, we further assume that 

A,B^x^-' (4) 

(which of course makes the first inequality in redundant). Certainly, 
the case in which A and B are both small is of primary interest, so the 
restriction (jl]) is rather mild. 

One of the main ingredients of the method of Fouvry and Murty is the use 
of the Weil bound to prove the asymptotic formula 2AB/p + O^p^^'^^"^^^) for 
the number of curves Ea^;, with |a| ^ A ^ (p — l)/2 and |6| ^ i? ^ (p — l)/2 
that are isomorphic to a given curve E^^^; see ^B] Section 7]. Here, we show 
that, on average over r and s, the error term can be improved substantially, 
and this suffices for the problems that we consider. On the other hand, our 
method does not directly apply to the question considered in [23] since a set 
of elliptic curves over ¥p with a prescribed number of Fp-rational points (that 
is, a set of isogenous curves) is much "thinner" than the sets of curves with 
which we work. Of course, there is some possibility that both approaches 
might be combined to improve the threshold ([1]) for the original problem. 

Baier and Zhao [5] have also studied the distribution of N^'^^{A, B; x) 
using a very different method from ours; their results are also different (but 
there is partial overlap) and in many cases are weaker with respect to the 
range of A and B as well as the uniformity in a and f3. In particular, among 
other restrictions, the inequalities 

A,B^ 

are required for [5| Theorem 1]. In some cases, however, the results of [5] 
are stronger than ours. It is worth mentioning that Baier and Zhao [5] have 
estimated the average deviation of n^^^(a,/3;x) from the value predicted by 
the Sato-Tate conjecture. 

Finally, several more results in these directions have recently been ob- 
tained in [Ij that also appear to be weaker than our results. 

1.4 Notation 

Throughout the paper, any implied constants in the symbols O and -C may 
occasionally depend, where obvious, on the parameters e and K but are 
absolute otherwise. We recall that the notations U <^V and U = 0{V) are 
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both equivalent to the statement that the inequahty \U\ ^ cV holds with 
some constant c > 0. 

The letters p and q always denote prime numbers, while m and n always 
denote integers. As usual, we use 7r(x) to denote the number of primes p ^ x. 
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2 Preliminaries 
2.1 Character sums 

For a prime p, we denote by Xp the set of multiplicative characters of Fp, 
Xo the principal character of Fp, and X* = Xp \ {xo} the set of nonprincipal 
characters; we refer the reader to [311 Chapter 3] for the necessary background 
on multiplicative characters. We recall the following orthogonality relations: 

— Y = { otherwise, 

and 

for all V G Fp and Xi) X2 ^ '^p (here, X2 ^^e character obtained from X2 by 
complex conjugation). 

The following result combines the Polya- Vinogradov bound (for u = 1) 
with the Burgess bounds (for u ^ 2); see [31], Bound (12.58)] and also [3T| 
Theorems 12.5 and 12.6]: 
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Lemma 1. Uniformly for all primes p, all positive integers L, M, v, and all 
characters x ^ '^p; we have 



L+M 



n=L+l 



The next bound is due to Ayyad, Cochrane and Zheng [21 Theorem 2]; 
see also the result of Friedlander and Iwaniec 



Lemma 2. Uniformly for all positive integers L, M , we have 

4 



E 



L+M 



n=L+l 



n] 



< pM 



2+o(l) 



(p oo). 



We also need the following statement, which is contained in the more 
general result [2S1 Theorem 10] of Garaev (which also applies to character 
sums with composite moduli and allows significantly more flexibility in the 
choice of M): 

Lemma 3. Fix e > and rj > 0. If x is sufficiently large, then for all 
M ^ x^ , all primes p ^ x with at most x^^^^^^'^"^^^ exceptions as x —> oo, 
and all characters x ^ ^p, we have 



M 



n=l 



n] 



where the function implied by o(l) depends only on e and rj. 

Proof. We can assume that rj < 1/16 for otherwise there is nothing to prove. 

If M ^ x^^^, then the result follows from Lemma [1] with 1^ = 1. Indeed, 
for a prime p ^ a; we have 



M 



n=l 



<: pV2+o(l) ^ ^l/2+o(l) ^ ^2/3+o(l) ^ ^l-r, 



for any fixed rj G (0, 1/16) if x is large enough. 

For M ^ x^/^ the result is a direct consequence of [251 Theorem 10]. □ 
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2.2 Distribution of powers 

Let dp = gcd(p — 1, 6) and put 



(Tp(M) = max < 1, 



M 



n=l 



For any integers B,s we define 

Zs{B;p) ^{ue¥l : su^ = b (mod p) where |6| ^ B}. 
We have the following bound on the cardinality of Zs{B;p): 
Lemma 4. For all primes p and all positive integers B,s < p, we have 

\#ZsiB;p)-2B\^nap{B). 
Proof. For all n G Z we have 

#{iieF; : ii« = n (modp)}= ^ x{n). 

If s is an integer such that ss = l (mod p), it follows that 

#Z,(S;p) = E Xisb) = (2S + 1) + J] x(.) J] x{b). 

\b\^B xeXp xex; \b\^B 



X ^=xo 

Since the inner sum is bounded by 



x'*f=xo 



\b\^B 



^2ap{B), 



and 



#{X e '^p* : X''' = Xo} = tip - 1 ^ 5, 

the result follows. 

For any integers A,B,r,s we define 

Zr,s{A, B;p) = {ti e Zs{B;p) : ra** = a (mod p) where |a| ^ ^4}. 
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Lemma 5. For all primes p and all positive integers A,B,s< p, we have 

2A-#Z.(B;'P) 



reF„ 



P 



as p oo. 

Proof. We can assume that AB > p since the result is trivial otherwise. 
Indeed, ii AB ^ p then ^1/251/2^1/2 ^ ^^ile 

2A-#Z,{B;p) 



r-eF„ 



#Zr,s{A,B;p) 



P 



<: + 2A ■ i^Zs{B-p) < AB. 



For every a G F* let a be an integer such that aa = 1 (mod p). Using ^ 
it follows that 



n — 1 » — 1 



Since 



2A-i^ZsiB;p) 2A-i^Zs{B-p) ^A-i^Zs{B-p) ^AB 



p 



we have 



where 



E 



1 ^ 
p — 1 



«1, 



(8) 



^ r6Fp 



By the Cauchy inequality, VT^ does not exceed 

^reFp xe-^p* ueZs{B;p) |a|<A 



Xl.X2eA'jJ ui,U2&Zs{B;p) 



lail.laaKA 



rSFp 
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Using the orthogonality relation we deduce that 



U 



(9) 



Applying the Cauchy inequality again, it follows that 



u&Zs{B;p) 



E 



(10) 



The second sum is of size 0{p^'^°'^^'> A^) by Lemma [2l For the first sum, we 
extend the summation to include the trivial character X = Xo, obtaining 



E 



ueZs(B;p) 



^E 



E x( 



U 



pT, 



where T is the number of solutions to the congruence 



4„,4 



1"'2 



4 4 



(modp), Ui,U2,U3,U4 e ZsiB;p). 



Note that T does not exceed the number of quadruples (ui, ^2, M3, ^4) in 
Zs{B\pY for which 

u^n}^ = ul^ul^ (mod p). 

Since sm^ = bj (mod p) for some bj with ^ B, and each 6j corresponds 
to at most six values of Uj, it follows that T ^ 6^i?, where i? is the number 
of solutions to the congruence 

b\b\ = blb\ (modp), I62I, I63U&4I ^ -B. 

Clearly, R = 2Q, where Q is the number of solutions to the congruence 



6162 = &3&4 (mod p). 



l^il, Ih 



|(^4 



6J ^ 5. 



Writing 



Q 



p 



^E 



(25 + 1)4 
p — 1 p 



^E 
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and using Lemma [2] again, we see that 

Collecting the above estimates and substituting them into ffTU]) we deduce 
that 

which together with ([8]) implies that 

2A-#Z,(B;'P) 



E 

r6Fp 



P 



□ 



« p + Al/2SpV4+o(l) + ^1/2^1/2^1/2+0(1)^ 

Finally, for AB > p we have p < A^^'^B^^'^p^^'^, and the result follows. 

Combining Lemmas H] and we immediately obtain: 
Corollary 6. For all primes p and all positive integers A, B,s < p, we have 

AAB 



E 



p 



« Aa,{B) + Al/2BpV4+o(l) ^ ^1/2^1/2^1/2+0(1)^ 



For large values of A, the following lemma provides a stronger bound for 
the sum considered in Lemma O 

Lemma 7. For all primes p and all positive integers A,B,s < p, we have 

2A-#Z,(B;'P) 



E 



#ZrAA,B;p) 



p 



< B^/'^p logp. 



Proof. We argue as in the proof of Lemma [5] arriving at (Q. Next, we apply 
Lemma [1] with u = 1 (that is, the Polya- Vinogradov bound) followed by the 
Cauchy inequality, deriving the bound 



W"^ < p(logp)^ ^ 

^ p(iogp)^ 



ueZsiB;p) 
u£Zs(B;p) 



p{p - l)(logp)^T, 
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where T is the number of solutions to the congruence 

u\ = U2 (modp), Ui,U2 e Zs{B;p). 
Since T ^ Ai^Zs{B;p) = 0{B), the resuh follows. □ 

We remark that for in the proof of Lemma [7] one can use Lemma [1] with 
values of u other than one, but doing so does not lead to any improvement 
over the bound of Lemma O 

Combining Lemmas H] and [7| we obtain: 

Corollary 8. For all primes p and all positive integers A, B, s < p, we have 

< Aap{B) + B^/^p log p. 



4^ZrAA,B;p)- 



AAB 
p 



2.3 Statistics of elliptic curves 

It is well known that if a, b,r,s G ¥p, then the two curves and E^^s are 
isomorphic over ¥p if and only if a = ru^ and b = su^ for some m G F*. In 
particular, each curve E^ b with a, 6 G F* is isomorphic to (p — l)/2 elliptic 
curves E^^^, and there are 2p + 0(1) distinct isomorphism classes of elliptic 
curves over F^; see [36]. Thus, our results can be conveniently formulated in 
terms of counting functions for individual curves E^ rather than in terms 
of isomorphism classes of curves, as in the papers [101 [2Sl SS] • 

Let Tp{a,P) be the set of set of pairs (a, &) G F* x F* such that the 
inequalities a ^ '4^a,b{p) ^ P hold. Thanks to Birch [10], one knows that 

#7;(a,/3) ~ /isT(a,/5)p^ (p ^ oo), 

however we require a stronger result. What is needed is a full analogue for the 
Sato-Tate density of the bound of Niederreiter [12] on the discrepancy in the 
distribution of values of (normalized) Kloosterman sums. Fortunately, such 
a result can be obtained using the same methods since all of the underlying 
tools, namely [42], Lemma 3] and [Ml Theorem 13.5.3], apply to ipa,b{p) as well 
as to values of Kloosterman sums. In particular, from [Ml Theorem 13.5.3] 
it follows that 



1 sin((n+ l)^a,b(p)) ^ ^^_i/2 

(^-1)^ ^Tri, sin(^„,6(p)) 



<ng-^/2 (n=l,2,...) 



4a3 +276^^0 



(see also the work of Fisher [221 Section 5]). Thus, as in [12], we have: 
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Lemma 9. Uniformly for all primes p, we have 

max I i^Tp{a, {3) - fisiia, I3)p'^ I < p'^^^. 

Next, for any prime p we denote 

n fi- 



q\p-l 



where the product is taken over all prime divisors q oi p — 1. 

Let Cp be the set of pairs (a, 6) G F* x F* such that Ea,fc(Fp) is cyclic. The 
cardinality of Cp has been estimated by Vladu^ l46j as follows: 

Lemma 10. For all primes p, we have 

Finally, for any integer k, let ujk{m) denote the completely multiplicative 
function which is defined on prime powers q^ as follows: 



q'-\q - 1) 

gi+b72j-l(g2 _ 



iffc^l (modgri/21); 
ifA; = l (modgri/21). 



(11) 



For each integer m, let Vp{m) be the set of pairs {a,b) G F* x F* such 
that m I #E(j fe(Fp). Then, by the result of Howe ^29j we have the following 
asymptotic formula for ^T>p{m): 

Lemma 11. For all primes p and all positive integers m, we have 
|#r'p(m) - U0p{m)p^\ ^ m^+"(^V^^^ (m cx)). 



3 Main Results 

3.1 Distribution of curves over finite fields 

For an arbitrary subset 5 C Fp x Fp, we denote by Mp(iS, A, B) the number 
of curves 'Eia,b such that (a, 6) G 5, \a\ ^ A and |6| ^ B. Here, we obtain an 
asymptotic formula for Mp{S, A, B). 
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Similar to ([7]), we now define = gcd(p — 1,4) and put 



Pp{M) = max 



M 



n=l 



We also denote 

SiiA, B; p) = mm{Aap{B) + A^/^Bp"/^ + A^'^B^/^p'/^ 

Bp,{A) + AB^'Y'' + A^I^B^/Y'^], 
82{A,B-p) = min {Aap{B) + B^'^p logp, B pp{A) + A^'^p \ogp] . 

Theorem 12. For all primes p > 3, all integers 1 ^ A, B ^ {p — 1) / 2 , and 
all subsets 5 C Fp x Fp such that whenever (r, s) E S and ;,(IFp) = Ej.^s(Fp) 
follows that (a, 6) G S, the following bound holds uniformly: 

Mp(5, A,B)-^ #5 « min {S^iA, B; p)p°^^\ E^^A, B-p)]. 

Proof. It follows from the properties of isomorphic curves given in Section [2^3] 
that 



Mp 



{S,A,B) = ^ V 4^^ZrAA,B;p) + 0{A + B), 
p — 1 , 



V 

(r,s)e5 



where we have estimated the contribution from curves with a6 = trivially 
as 0{A + B)] note that if a = rw^ and b = su^ then the same relations also 
hold with —u instead of m, so each group Ea ft(Fp) with \a\ ^ A and |6| ^ B 
is counted precisely p—1 times in the sum on the right-hand side. Applying 
Corollary [HI we obtain that 

Since 

AAB „^ 4AB „^ AB , . 

#5 Aa^^iB), 



p{p — 1) p 

it follows that 



Mp(5, A,B)-^ #5 « A ap(i?) + A'/^Bp'/'+"^'^ + A^/^i?! V/2+o(i)_ 
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Examining our arguments closely, in particular those of Section [21 we see 
that the roles of A and B are fully interchangeable, hence we also have 

MJS, A,B)-^ #5 « B p,{A) + AB^'Y"^"^'^ + ^^251/2^1/2+0(1)^ 
and thus. 

Using Corollary [8] instead of Corollary El a similar argument shows that 

Mp(5, A,B)-^ #5 « £2iA, B; p), 
pz 

and this concludes the proof. □ 

Using Lemma [H to estimate £i{A, B]p), we deduce that: 
Corollary 13. Under the hypotheses of Theorem [7M the bound 

M,{S,A,B)-^ifS 

pZ 

^ minjA^i-i/V^+i^/^^^') + A'/'Bp'/' + A^'^B^/Y'\ 

^i-i/-5p(-+i)/{4.^) + A^i/y/' + A^'^B^/Y'^^p"^^^ 

holds with any fixed integer v ^ 1, where the function implied by o{l) depends 
only on v. 

Similarly, using Lemma [T] to estimate S2{A, B]p) we obtain: 
Corollary 14. Under the hypotheses of Theorem [7^ the bound 

M,{S,A,B)-^4fS 

pZ 



^ min |Ai?i-i/V'^+i)/(^-') + B'^Y A'-'/'^Bp^'^'^/^'-'"^ + A'/^p] 



p > 



holds with any fixed integer u ^ 1, where the function implied by o(l) depends 
only on v. 
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Applying Corollary [12] with a sufficiently large integer u, we have the 
following: 

Corollary 15. Under the hypotheses of Theorem [I^ for any fixed e > 
there exists 6 > such that if 

mm{A, B} ^ and AB ^ 

then 

Mp{S, A,B)-^ #5 « ABp~', 
where the constant implied by <^ depends only on e. 

3.2 Sato— Tate conjecture on average 

Theorem 16. For any fixed e > there exists 5 > such that for all 
integers A and B satisfying the inequalities ([3]) and (jlj), and all real numbers 
0^a<f3^TT,we have 

Nl^f,{A, B; x) = (4^st(«, f3) + O AB n{x), 

where the constant implied by O depends only on e. 

Proof. Let us assume that A ^ B since the case A < B is similar. Using the 
trivial bound Mp{Tp{a, (3), A, B) ^ AB for primes p ^ 2A + 1, we have 

7VJ^(A B-x)= P), A B) + OiA'B). 

2A+l<p^x 

Applying Lemma [9] and Theorem [121 we derive that 

MpiTpia, p), A, B) - 4/isT(a, 13) AB < £i{A, B; p)p<'^ + ABp-'/\ 
Therefore, since /isT(a,/5) <^ 1, we have 

Nl^p{A, B; x) - 4/isT(a, (3)AB7r{x) < A^B + ABx"^/^ + x"^^^ ^ B- p). 

Applying Lemma [3] with t] = 1/24, we get 

ap{B) <: + B^'/'^x (x^oo), 
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and it follows that 

J2 ^liA B; p) « Ai?a;"/i2+o(i) ^ ^^23/24^ 

P^x (12) 

+ + ^1/2^1/2^3/2 

(X 00). 

After simple calculations, we obtain the stated result. □ 

3.3 Cyclicity on average 

Let denote the following constant: 

1 



q{q - 1) (g2 - ] 

■i 

where the product runs over all primes q. 

Theorem 17. Let e > and K > be fixed. Then, for all integers A and 
B satisfying the inequalities ([3]) and (jl]), we have 

N^'i^A, B; x) = {40 + ((logx)"^)) AB 7r{x), 

where the constant implied by O depends only on e and K . 

Proof. Let us assume that A ^ B since the case A < B is similar. Using the 
trivial bound Mp{Cp, A, B) ^ AB for primes p ^ 2A + 1, we have 

N''{A,B;x)= Yl Mp{Cj„A,B) + 0{A^B). 

Applying Lemma [10] and Theorem [12], we derive that 

\Mp{Cp,A,B)-MpAB\ <: {£i{A,B-p)+ ABp-^'^)p"^^\ 

Since the bound AB ^ p^ implies ABp^^/"^ ^ A^^'^B^/'^p^/'^ , and the second 
term can be dropped; thus, 

\Mp{Cp,A,B) -MpAB\ ^ £i{A,B-p)p"^^\ 

Hence, using (1121) . the inequality A^B ^ ABx/ (log x)^^^ , and the trivial 
bound dp for primes p ^ 2 A + 1, after simple calculations we derive the 
estimate 

N%A, B- X) =AABj2^p + [j^^^) ■ (13) 
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Now write 
where 



fin) = n (i 

q\n ^ 



q{q^ - 1] 



the product being taken over all prime divisors q of n; note that f{n) is 
a multiplicative function. Let g{n) be the multiplicative function that is 
defined on prime powers q^ as follows: 

~^ iik = 1; 



^0 if A; ^ 2. 

Then, 

fin) = J29id). 

d I n 

It is easy to check that the functions f{n) and g{n) satisfy the conditions 
of [30l Theorem 3], hence it follows that 



(14) 



pi^x P^x 

with 

~' 9{d) 



Inserting the estimate into (fT3ll . we finish the proof. □ 



3.4 Divisibility on average 

Put 

l^=\{q^'"\ (15) 
and set ^ 

gcd(A;,^)=l 
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where is the Euler function, and co'fc(m) is the completely multiplicative 
function which is defined on prime powers by (ITT]) . For example, if m = g 
is prime, then we have 



q'-2 



Theorem 18. Let e > and K > be fixed. Then, for all integers A and 
B satisfying the inequalities ^ and (jlj), and all integers m ^ (logx)^, we 
have 

NiiA, B; x) = (4 + O ((logx)-^^')) AB 7r(x), 
where the constant implied by O depends only on K and e. 

Proof. Let us assume that A ^ B since the case A < B is similar. Using the 
trivial bound Mp{Vp{m) , A, B) ^ AB for primes p ^ 2A + 1, we have 

N^^{A,B;x)= Yl Mp{Vp{m),A,B) + 0{A^B). 

2A+l<p^x 

Applying Lemma [TT] and Theorem [T2l we see that for p ^ x and x oo: 

\Mp{Vp{m),A,B) -Aujp{m)AB\ ^ {Si{A, B;p) + ABp-^/^) p"^^^ 

^ S,iAB;p)p°^'\ 

where the second inequality follows from the fact that the term ABp^^^"^ never 
dominates Si{A,B]p) (see the proof of Theorem [T7|) . Hence, using f[T^ and 
the trivial bound ujp{m) <^ 1 for primes p ^ 2 A + 1, we conclude that 



Ni{A,B-x)=4ABY,^p{m) 

As the value of ujp{m) depends only on the residue class of p modulo /i, where 
/i is given by (IT^ . using the Siegel-Walfisz theorem (see [211 Corollary 5.29]) 
we immediately obtain the desired result. □ 



20 



4 Primes p with gcd{p — 1, 12) = 2 



Clearly, Theorem [12] leads to nontrivial results only under the condition 
max{y4, B} ^ which is determined by Lemma [1] (this is where the 

relevant character sums admit nontrivial estimates). However in the special 
case that gcd(p — 1, 12) = 2, using the result of [7] on the density of quadratic 
residues and nonresidues in short intervals, one can obtain some nontrivial 
estimates over a wider range. 

Indeed, if gcd(p — 1,6) = 2, then 

Zs{B;p) = {u e ¥p : su*^ = b (mod p) where |6| ^ B} 
= {u (z¥* : su^ = b (mod p) where \b\ ^ B}. 

Thus Zs{B;p)/2 is the number of quadratic residues or nonresidues in the 
interval |6| ^ 5 (according to whether s is a quadratic residue or nonresidue). 
Therefore, by the result of |^ we have 

ZsiB;p):$>B 

whenever B ^ p^/i^V^)+^ for some fixed e and all sufficiently large p. This 
new bound can be used in Lemmas [5] and [7] as before. If gcd(p — 1, 4) = 2 as 
well, then similar arguments can be applied with respect to A. Arguing as 
in the proof of Theorem [121 ^6 obtain a lower bound on Mp{S, A, B) which 
holds under the condition 

mm{A, B} ^ pV(4v^)+e ^^^^ ^ 

5 Further AppHcations 

For specific ranges of the parameters A and B, one can use Lemma [1] instead 
of (or in conjunction with) Lemma [3] to obtain stronger and more explicit 
bounds for the error term in Theorem [T6l On the other hand, in Theorems [T7I 
and[T8]the main contribution to the error comes from the imprecision involved 
in estimating sums with -t^p and u!p{m), respectively. 

Using Lemma [H in place of Lemma [3] also allows one to study averages in 
which the parameters a and b vary over the shifted intervals [H + 1,H + K] 
and [L + 1, L + M], respectively. 
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Our arguments can also be used to improve the bound of [S] on the size 
of the "smallest" WeierstraB equation which is isomorphic to a given curve 
E. Given an elliptic curve E over Fp let us define 

/i(E) = min {max{a, b} : 1 ^ a,b < p, Ea,b = E} , 

(that is, the minimum is taken over all curves E^,?, which are isomorphic to 
E). This question has been recently considered in |T2], where, using a variant 
of the method of [23] the bound fi{E) = 0{p^^^) has been derived. It has 
been shown in [S] that for almost all curves one has fi(E) ^ p2/3+o(i)^ Using 
a variant of Theorem [12] for the intervals 1 ^ a ^ A and 1 ^ b ^ B one 
easily derives /i(E) ^ for almost all curves E over Fp. 

Here, we have not used the full strength of the results of Garaev [25] . 
Doing so, one can actually replace the lower bound A, B ^ x"^ in with the 
bound A,B ^ exp (c-^/log x ) for an appropriate constant c > and drop the 
condition (jl]). 

For fixed integers m > A; ^ 0, one can also study the counting functions 
■ujlfj{m, k; x) and zu^^\{m, k; x) of primes p ^ x (with p f 4a^ + 276^) such 
that 

#E„,6(Fp) = k (mod m) and p+1- #Ea,6(Fp) = k (mod m), 

respectively. Our method can be adapted to obtain asymptotic formulae for 
the average values 

5^ 5Z and ^ J2 ^ali^^k;x) 

\a\^A\b\<iB \a\^A\b\<iB 

over a wide range of values in the parameters A, B and m. 

In principle, one can combine our approach with the results of [SB] to 
study the distribution of the discriminants of complex multiplication fields 
of the curves E^ ^(Fp), on average over a and b. Such discriminants are related 
to the size of the Tate-Shafarevich group of Ea^bi^p)] thus, it is likely that our 
approach can be used to improve some of the estimates of [I6] on average. 

We remark that the distribution of prime values of #Ea^fe(Fp) is of great 
interest in the theory of cryptography. Our method can be adapted to study 
this question as a and b vary over short intervals; see where also the 
challenging task of evaluating the main term has been treated. 

For the problems mentioned above, the corresponding sets of curves are 
"massive" enough to permit an application of Theorem [T21 nevertheless, the 
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main obstacle in each case is the evaluation of the main term, which may 
require a significant effort even if the work is feasible. 

It is natural to try to combine our approach with recent work of James 
and Yu [33] which studies, on average over |a| ^ A and \b\ ^ B, the number 
of primes p ^ x for which p + 1 — Ea^fe(Fp) is a perfect k-th power. In some 
cases, it may be possible to lower the threshold on A and B. For k ^ 3 the 
corresponding set of curves appears to be too sparse, but perhaps for /c = 2 
there is a chance for our method to yield an improvement. 
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